Summer University Warsaw

Information on processing of personal data (Summer University Warsaw 2025)

1. Controller

The controller of personal data is SGH Warsaw School of Economics with its seat in Warsaw, al. Niepodległości 162, hereinafter referred to as SGH.

2. Data Protection Officer

You may contact the Data Protection Officer designated by SGH via e-mail iod@sgh.waw.pl.

3. The purposes and legal basis of processing of personal data

Your personal data will be processed for the following purposes:

1. registration for the Summer University Warsaw 2025, hereinafter referred to as the Course, maintaining contact with you in connection with the Course, conducting classes and for the purpose of documenting the Course;
2. sending information related to the university's statutory activities beyond the study process (educational offer, conference information, training course details, information on events, bulletins, participation in research, alumni contacts).

The legal basis for processing of your personal data is:

1. point (b) and (e) of Art. 6 (1) GDPR (necessity for the performance of a contract to which the data subject is party and necessity for the performance of a task carried out in the public interest) and The Act of 20 July 2018 – Law on Higher Education and Science (Journal of Laws [Dz.U.] of 2023 item 742 as amended);
2. point (a) of Art. 6 (1) GDPR – consent (if provided) to the processing of your contact information for the purpose of sending information related to the university's statutory activities beyond the study process.

4. The recipients or categories of recipients of the personal data

If the controller uses the services of other entities, personal data may be disclosed to them on the basis of contracts entrusting them with the processing of personal data, and these entities will be obliged to preserve the confidentiality of the processed data.
Your personal data may be disclosed to your home institution.

5. The period for which the personal data will be processed

Personal data will be processed during the period of performance of a contract, and during the period of storage student’s documentation for archival purposes. If you consent to the processing of your data for the purposes of sending information related to the university's statutory activities beyond the study process, the data will be processed until the consent is withdrawn.

6. Obligation to provide personal data and consequences of failure to do so

Providing personal data is voluntary, however necessary to for the purposes mentioned above.

7. The rights of data subject

You have the right to access your personal data, their correction, restriction of their processing, the right to object to processing of your data, and, in the cases provided by law, to erase your personal data. You have a right to object to processing of your personal data on grounds relating to your particular situation.

You also have a right to withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

8. Automated individual decision-making, including profiling

Your data will not undergo profiling and no automated decision-making will be conducted based on these data.

9. The right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes upon GDPR.